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WHAT IS CLAIMED IS ; 

1. An integrated system for providing a plural^y 
of communications network management services apd 
products to a customer over the public internet, said 
network management services and products accessible 
from a client workstation employing a client browser 
associated with said customer and capable of receiving 
web based communications from a co*f\muni cat ions service 
enterprise, said system comprising: 

(a) one or more secure webservers for managing one 
or more secure client sessions over the internet in 
response to customer entity into said system, each said 
secure web server supporting secure communications with 
said client workstation; 

(b) a plurality^ of client applications integrated 
within a web-ba^ed GUI and downloaded from a secure web 
server according to pre -determined customer 
entitlements, each said client application for 
providing^ a customer interface integrated within said 
web bas/d GUI and enabling interactive communications 
with >one or more communications network management 
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J. 1 lie lriuByiaucu oyoucui ao xaimcu j_h 

further comprising a dispatch server foj>^6ommuni eating 
with a secure web server and a plurality of said remote 
application resource, said di^gr^tch server providing 
verification of system acp^ss and proxy generation for 
said system resources >af ter said customer's 
entitlements have Jzfeen verified. 



^7 iu 

/ ^ \ The integrated system as claimed in claim 2 , 
WhereirXsaid system includes digital certificates to 
authenticate a secure web server to said client web 
browser, 



5. The integrated system as claimed in Claim 2, 
wherein said downloads web-based GUI comprises a 
backplane obj ect^ownloaded with, and launched by said 
web-based GUSf] said backplane object capable of 
launching^said one or more client applications upon 
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2 
3 



^ ^7 »1 \ £> 

1 i^o^O ^ ( ^* Y he inte 9 rated s Y stem as claimed in claim /T, 
wherein th& client application is a program launched 
from a new browser window created by the backplane. 




10. The integrated system^cl aimed in claim 7, 
wherein the backplane objeprt: maintains session 
information received fa^om a network management resource 
in static memory fdr the duration of a session, and 
enables the client applications to access the static 
memory, 

whereby a need for each of the client applications 
to cpfnmunicate with remote network management resources 
fo£ once obtained information is eliminated. 




i8 \ is 

Jrtf. Vhe integrated system as claimed in claim 
farther comprising a set of common graphical user 
interface objects for enabling the client applications 
and the backplane to provide common look- and- feel 
desktop window Vnanagement features . 
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18. The integrated system as chimed in claim 17, 
wherein the inbox client application further includes a 
polling thread for detecting >afn incoming message from 
the inbox server via a fir^t secure connection, the 
polling thread f urther/^tarting a new thread upon 
detection of the incoming message, wherein the new 
thread starts arKr listens on a second secure connection 
for detecting Aew messages, while the polling thread 
receives th^f incoming message on a first secure 
connection, 

whereby multiple messages may be downloaded 
simultaneously as detected. 




. "4 

he integrated system as claimed in claim >ef , 
wherein the\ database for storing and maintaining said 
customer specific reporting data further comprises a 
pre-defined directory associated with each of the one 
or more networ It management resources, wherein each of 
the one or moreVietwork management resources stores the 
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*port\data and the notification alert data to its 
respective pre-defined directory in the inbox server, 



20. The integrated system as claimed in Claim^ 
wherein a network management resource provides a jzfriced 
call detail data reporting function for providing 
customer specific data pertaining to usage 0t a 
customer's switched communications netwcy 



21. The integrated system/as claimed in Claim 20, 
wherein a network management /resource providing a 
priced call detail data reporting function comprises: 

a system for extracting call detail data records 
from billing systems/generating priced call detail 
records specific po a customer's communications 
network, 

a system^ for harvesting said extracted priced call 
detail records for storage in an database storage 
device ; 

decision support server for receiving customer 
ist messages for said priced call detail data, said 
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decision support server acces^irrfq said customer- 
specific priced call detail data from said database 
storage device and^ransmitting said customer-specific 
priced call dj&T-ail data to said xnbox server in 
accordance^with said customer request . 




30 -23 

The integrated system as claimed in Claim >5T, 

Js/) Vy wtere^n a reporting option includes running a pre- 
defined report at a pre -determined frequency, said 
report scheduler system communicating a message to said 
decision support server to run said pre-defined report 
at said predetermined frequency, each said pre-defined 
report being \pdated with recent customer- specif ic 
priced call derail data available at a run time. 




23. The integrated system acclaimed in Claim 16, 
wherein a network managemenj^^esource provides a near 
real-time unpriced caLi^detail data reporting function 
for providing cusbefmer specific data pertaining to 
usage of a cuafefemer's switched communications network, 
said unpriced call detail data reporting service 
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receiving customer request^ft^ssages for customer- 
specific unpriced cajUKcletail data and transmitting 
said customer-specific unpriced call detail data to 
said inbox server in accordar 
request^ 

si 

The integrated system as claimed in Claim 
wlVerei>n a reporting option includes running a customer- 
def inecKunpriced call detail data report at a pre- 
determined frequency, said report scheduler system 
communicating a message to an unpriced call detail data 
reporting server for obtaining recent customer- specif ic 
unpriced calA detail data. 



25. The integrated systejp^s claimed in Claim 23, 
wherein a network management resource comprises: 
a system for generating statistical data based on real- 
time call data obp^ined from a circuit -switched 
communicationa/network, said statistical data being 
generated according to said customer entitlements; and, 
a g^Lient application for integrating retrieved 
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statistical data within^ Web-based GUI for 
presentation to saia customer via said integrated 
interface, salcKweb-based GUI being updated to contain 
statistica^aata at customer- specif ied time intervals. 



The integrated system as claimed in Claim Sfb , 
wliereiil said customer entitlement includes 
specification of one or more toll free numbers 
associated with a customer's communications network for 
which statistical data are to be generated. 



nfr \ ?n 

yf. The integrated system as claimed in Claim 
wherein said system for generating statistical data 
includes script mechanism for initiating update of said 
web-based GUI with motet recent statistical data. 



28. The integraj>£d system as claimed in Claim 25 , 
wherein a networlj^lrianagement resource comprises: 

a communications network configuration device for 
maintaining an inventory of customer's network call 
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customer's n^felvork according to said request. 

The integrated system as claimed in Claim S^, 
rtiereir^said modification request messages includes a 
unique customer identifier enabling downloading of 
specific a^ll routing plan details associated with said 
customer identifier. 



31. The integrated system as claimed in Claim 30, 
wherein a customer request message includes aiVorder 
for modifying an existing customer network/<5all routing 
plan for a predetermined period of time< said network 
management server enabling said customer network to 
automatically revert to a corresponding call routing 
plan configured prior to invot^ation of said order at a 
customer-specified revert Jcime. 



32. The integrated system as claimed in Claim 31, 
wherein a custgrfier request message includes an order 
for modifying a percent allocation of call traffic 
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The integrated system as claimed in Claim 

display^ of broadband network reports in accordance with 
selected customer reporting options, said customer 
report ing\ options including specification of graphical, 
tabular, afad map views of said network performance 
data. 



H3 

Thk integrated system as claimed in Claim 
y? t wherein said\report viewer application includes 
support for simultaneous multiple graph reporting views 
of specific broadba\d network performance data. 



The integrated system as claimed in Claim 



wherein said customer\s switched data network 
generates alarm status indications, said broadband 
network server receiving sai^ alarm status indications 
pertaining to said customer ' sVetwork and communicating 
alarm status data to said customer workstation via said 
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integrated interface , 



as 



-i- l l V**. -1- X X ^-r l» » 



^6/ wherein\ said report requestor application enables 
generation ot messages specifying network performance 
thresholds fo\ enabling reporting of specific data 
network behavidf via said integrated interface . 



The integrated system as claimed in Claim 
wherein said report viewer supports display of a 
graphical view comprising an area map view having 
indicators depicting locations of a customer's data 
network, said report viewer application enabling said 
customer to select said indicators on said graphical 
representation and provideXa textual view of network 
performance characteristicsvrelating to physical 
circuits supported at said selected network location. 



5 



^ y§ . The integrated systetn as claimed in Claim 
, wherein said physical circuit s\ supported at said 
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ecued network location includes permanent virtual 
circuit^ 




4 
5 
6 
7 
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~\ 40. The integrated system as claimecj^fn Claim 

33, wherein a network management resou^^includes a 
system for providing an alarm maimg^ment function 
including a device for derivipg performance alarms 
based on performance stat^tics collected on the 
performance of a custodier's data network; said 
integrated system further comprising: an event monitor 
server for receiving and storing the network 
performance statistics and the derived alarms from the 
deriving jefevice, and communicating said network 
performance statistics and the derived alarms for 
presentation to said customer via said integrated 
lorterf ace . 



$7 



ytT, wherein said report requestor application further 



Vrhe integrated system as claimed in claim 



enables customers to define and submit network 
performance thresholds specifying reporting of specific 
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V ) 



^ ne/v 



work Behavior via said integrated interface, said 
event monAtor server enabling filtering of said network 
alarms and \?erf ormance statistics according to the 
customer -def\ned threshold for presentation to the 
customer at tl\e client workstation. 




42 . The integrated system as claimed in cl^im 
Ul, wherein a report requestor application furLftfer 
enables customers to define and enter troubleshooting 
procedures for specific alarms or circuit^ pertaining 
to the data network via the integrated^interf ace . 



1 
2 
3 
4 
5 
6 
7 
8 



43 . The integrated system as claimed in claim 

42, wherein a client application associated with said 
event monitor server enables customers to acknowledge 
receipt of a networkyalarm, via said integrated 
interface, said ey4nt monitor server comprising a 
process for automatically launching the trouble 
shooting procedure upon acknowledgment of the alarm 
associated^ with the trouble shooting procedure. 
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for display via said 




45. The integrated system as ci^fmed in Claim 

44, wherein the database of image paries further 
includes an object database ,^9-^id invoice application 
server further comprisii 

conversion process for imaging documents by 
defining key in£<5rmation necessary to retrieve 
documents f^?<5m the communications application service 
and compass the documents for storing; and 

tore process for loading the compressed documents 
o the object database. 



I The integrated system as claimed in Claim 

££r t wherein the database of image files further 
includes \n index database, said invoice application 
server further including index load process for storing 
index pointeVs pointing to the compressed documents 
into the indeA database, 
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1 50. The integrated system as clajjooecTTn Claim 

2 3, wherein said session management^^i^vided by said 

3 secure server includes webptf^kie generation at each 

4 instance of client id^rfuif ication to link a session 

5 with said clien^x€hrough a plurality of discrete client 

6 communications in said session to verify said client to 

7 said dispatch server at each transmission in said 

8 session. 

1 , ^ / ^3T7 \ The integrated system as claimed in Claim 

2 *&XT, wherein^aid cookie is generated by a program on a 

3 separate server during an entitlements communications, 

4 after identification and authentication of the client. 

<e \ 

1 The integrated system as claimed in Claim 

2 JlK, wherein said cl\ent web browser secure socket layer 

3 encrypts client identification, authentication and said 

4 session management cookie during each transmission. 

T V 

1 5*3 . The integrates system as claimed in Claim 
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2 ^sZ, wherein said session cookies provide simultaneous 

3 session Vnanagement for a plurality of system resource 

4 platforms^. 

<^\^ 54 • The integratedsys€em as claimed in Claim 

2-.^?^ 53, further including R^^encryption for transmission 

of all customer dat^oetween said secure web server and 
1 4 said dispatch server, and SSL encryption for 

\ 5 transmission of all customer data between said secure 

L6^_^ web server and said client web browser. 

1 ^Jty \J ^ / pv. \ The integrated system as claimed in Claim 

2 whereiA each client request from said web browser 

3 is encryptedV with a public key provided by said 

4 communicatiorvte network, and each of said client 

5 requests includes an encrypted client cookie for client 

6 authent i cat ion . \ 

\ 

1 ff€ . The integrated system as claimed in Claim 

2 >8' / further comprising: 

3 a client application downloaded from the secure 
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web server for enabling a customer to generate trouble 
tickets^ to be processed by a trouble ticket resolution 
entity; jand, 

a service inquiry application server for receiving 
requests far a customer's trouble ticket information, 
translating\said requests into commands for retrieving 
trouble ticket information from said communications 
network configuration device, and downloading response 
messages inducing said requested trouble ticket 
information to ^aid customer via said integrated 
interface . 



3lp 



The integrated system as claimed in Claim 



further comprising,: 

a client application downloaded from said secure 
web server for enabling customers to manage and track 
outbound network management features associated with 
that customer's communications network; and, 

an outbound network management server for 
receiving requests for outboukd network management 
features associated with a customer network including 
calling party numbers, dialing p\^ans, calling card 
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numbter and customer identification code sets, or, 
combinations thereof, translating said received 
requests^ into commands for retrieving said outbound 
network management feature information from said 
communications network configuration device, and 
downloading response messages including said requested 
outbound network management feature information to said 
customer via said integrated interface. 




p 
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58. A method for enabling customer management 
of their communications network assets via the public 
Internet, including provision of a jpiurality of 
services and products accessibl^/E rom a client 
workstation employing a cliejax web browser associated 
with a customer and capahie of receiving web based 
communications from spad communications service 
enterprise providi#§ said products and services, said 
method comprising the steps of: 

(a) ^/enabling interactive communications 
between ^tid system and said customer over the public 
Intercut with an object oriented protocol invoked from 
witJrfin said client web browser, said protocol 
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resource receiving said request me s sage s^^enera ting a 
proxy request corresponding to a r^<Juest message, 
providing responses according^€o said request, and 
communicating said resjj^iiSes to said secure web server 
for secure uploading to said customer workstation for 
display via aar^d integrated interface, 

whe^oy customer management of its communications 
netwo^lc management assets via the public internet is 
enabled. 



L V / T \ e method as claimed in claim ^er, wherein a 

secure web seper supports a secure sockets layer 
communication^ protocol , said secure web server 
supporting secuVe socket connections for encrypted 
communication between said client web browser and said 
secure web serverXsaid secure server also providing 
session management including client identification, 
validation and session management to link said session 
with said client- 



"7 



60. 
comprising 
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hiding a dispatch server for 
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1 applications interoperable with one another to provide 

2 said integrated cusmner interface to a plurality of 

3 communications network management products and services 

4 subscribed by the customer. 

1 /V / ^3 . \ The method as claimed in claim wherein 
2 9>^^ a p etwork management resource comprises a server for 

3 providing a customer authentication function, said 

4 method comprising: 

5 downloading \a logon object to be launched by said 

6 web-based GUI; \ 

7 accepting logoh transactions from the customer and 

8 creating a session oVject for communicating with said 

9 authentication server\to provide said customer 

10 authentication; and, \ 

11 upon successful customer validation, sending a 

12 command to the authentication server to download said 

13 one or more client applications and said web-based GUI 

14 having the backplane object. \ 

'\ C)f&~ y 64. The^rfethod as claimed in claim 63, further 

nr / 
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generate a completed r^fJort for presentation to said 
customer via said ifitegrated interface. 



,1! \ %fl 

ytf. "ithe method as claimed in claim frff, wherein 



sa^d report^-equestor application enables customization 
of reporting \L terns to be included in said customer 
report, said authentication server providing said 
reporting items\ capable of being customized according 
to said customer\entitlements to said report requestor 
application when exonerating a report request message, 




11 \ 10 

J/L. The method a\ claimed in claim , further 
including: providing a report scheduler system for 
initiating periodic generation of reports from network 
management resources at a customer- specif ied frequency. 

72. The method as cl^ifned in claim 71, wherein a 
network management r^&urce includes a database for 
storing and mainlining customer specific report data 
to be reported to said customer, and, a centralized 
inbox server for receiving a report availability 
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response from said report management server including a 
metadata description for display^rig said report, said 
method comprising: 

uploading said stored customer specific report 



int^e] 




data and the metadata description associated with the 
report data fsdm said inbox server to said client 
workstatigrTvia a secure web server for generation and 
presentation of a customer report via said integrated 
interface , 



sai'd inbox 



73 



e method as claimed in claim , wherein 
rver stores a notification alert received 
from a networ\ management resource that a generated 
report is available, said method including: 

launching an inbox client application from the 
backplane for receiving and presenting the notification 
alert to the customer via said integrated interface. 




74. The methocL^s claimed in claim 73, further 
comprising : 

impleflfenting a polling thread in said inbox client 
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application for detecting an incoming^ifiessage from the 
inbox server via a first secur^xtfonnection; 

starting a new threa^tlpon detection of the 
incoming message, wherein the new thread starts and 
listens on a secojra secure connection for detecting new 
messages, whi>e the polling thread receives the 
incoming message on a first secure connection, 

wtfereby multiple messages may be downloaded 
simultaneously as detected. 



lb 

3*. 
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Thd\ method as claimed in claim J*4T, further 

including : 

defining a\pre-def ined directory in said inbox 
server and custoir^er specific reporting data storage 
database, a pre-defined directory being associated with 
each of the one or ^iore network management resources, 
each of the nettyork management resources storing 
reporting data and th& notification alert data to its 
respective pre-def ined\directory in the inbox server. 
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76. The method as claimed in Claim 74, herein a 
network management resource provides a priced call 
detail data reporting process for providing customer 
specific data pertaining to usage of/a customer's 
switched communications network, ^aid priced call 
detail data reporting process yzfomprising the steps of: 
extracting call detail/aata records from billing 
systems generating pricecK call detail records specific 
to a customer's communications network, 

harvesting saijr extracted priced call detail 
records for storage in a database storage device; and 

implementing decision support server for receiving 
customer request messages for said priced call detail 
data, accessing said customer-specific priced call 
detail cjdta from said database storage device, and 
transmitting said customer-specific priced call detail 
data/to said inbox server in accordance with said 
c\yStomer request . 



5<^ V -70 ( \ 17 

fn. The rtethod as claimed in Claim further 
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comprising : 

running a pre-defined report at a pre -determined 
frequency \ said report scheduler system communicating a 
message to ^said decision support server to run said 
pre-defined Veport at said pre-determined frequency, 
each said pre\defined report being updated with recent 
customer-specific priced call detail data available at 
a run time. 




78. The method as claimed in Clajrtfi 74, wherein a 
network management resource provided a near real-time 
unpriced call detail data reppa^ing function for 
providing customer-specifj^f unpriced call detail data 
pertaining to usage of/a customer's switched 
communications netw<£rk, said method comprising: 

providing unpriced call detail data reporting 
server for receiving customer request messages for 
their unpriced call detail data; 

obtaining said customer specific unpriced call 

detail/data; and, 

transmitting said customer-specific unpriced call 
detail data to said inbox server in accordance with 
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said custoi 




request 



\ -ft 

Thte method as claimed in Claim ^8r f wherein a 
reporting option includes running a customer- defined 
unpriced call uetail data report at a pre -determined 
frequency, saicareport scheduler system communicating a 
message to said Unpriced call detail data reporting 
server for obtaining recent customer- specif ic unpriced 
call detail data. 




80. The method as claimed in Claija^VS, wherein a 
network management resource comprip^s a system for 
generating statistical data bas^d on real-time call 
data obtained from a circuix- switched communications 
network, said statistical data being generated 
according to said ci^tomer entitlements, said method 
comprising : 

integrati/fq retrieved statistical data within a 
Web-based for presentation to said customer via 

said int§4rated interface, said Web-based GUI being 
updatejzf to contain statistical data at customer- 
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specified tirpe^intervals , 



inc. 



method as claimed in Claim further 
luding sp^ifying one or more toll free numbers 
associated wit^ a customer's communications network for 
which statistical data are to be generated. 



*3 \ W 

. The method\as claimed in Claim further 
comprising: implementmg a script mechanism for 
initiating update of saVd web-based GUI with most 
recent statistical data. 



^ 83. The method as claimed in Qlarlm 72, wherein a 
network management resource coj»]5rises a communications 
network configuration deyk6e for maintaining an 
inventory of customer 3 network call routing plans and 
associated call/luting plan details, and interfacing 
with a plurality of network control elements for 
conf iguj>d^ng a customer's communications network 
accoj?aing to a desired call routing plan; said method 
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9 further comprising: 

10 providing a network marj^gement server for 

11 receiving customer requesc messages for accessing said 

12 call routing plan details from said communications 

13 network conf iguratiron device; 

14 retrieving^said call routing plan details 

15 according tef customer entitlements; and, 

16 dowriloading said call routing plan details for 

17 presentation to customers via said integrated 

18 interface. 

1 ^J^O^ IjA. The Vethod as claimed in Claim £3T, further 

2 comprising: \ 

3 generating la customer request message specifying 

4 customer modification of said call -routing plan, said 

5 network management^ server receiving said request 

6 messages via said mtegrated interface and translating 
1. said received modification request into commands for } 

8 input to said networlA configuration device; and, 

9 forwarding said commands to said network control 

10 elements for conf iguringr said customer's network 

11 according to said request^. 

COS-97-087 

-491- 

Hit 



11038. sf 

wb\F: \WORK\1171\11038\spec\11038 . spe 



85. The method as clajjKg'cr in Claim 84, wherein a 
customer request mes^atje includes a unique customer 
identifier ena^kiThg downloading of specific call 
routing pl^ri" details associated with said customer 
identifier . 



^6. 



e method as claimed in Claim further 

i 

comprising : 

generatiruj a customer request message including an 
order for modifying an existing customer network call 
routing plan fona predetermined period of time, said 
network management server enabling said customer 
network to automatical ly revert to a corresponding call 
routing plan configured prior to invocation of said 
order at a customer-bpecif ied revert time, 



^Ti The method as tlaimed in Claim fftT, further 
comprising : 

generating a customer Vequest message including an 
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rder f^r modifying a percent allocation of call 
traffic routed to a network number used in a particular 
call routing plan for a predetermined period of time, 
said network management server enabling said 
allocation o\ call traffic routed to a number to 
automatically Vevert to a corresponding percent 
allocation specified prior to invocation of said order 
at a customer- specif ied revert time. 

8*9. The method as claimed in Claxm SB^^tvherein a 
network management resource comprises : 

a customer's switched data cl£i5uit network; and, 
a device for periodical l^pol ling network switches 
of said switched data circuit network to obtain network 
performance data relating thereto and temporarily 
storing said networ)/ performance data, said method 
further comprisi] 

providing^ a broadband network server for receiving 
customer r^uest messages for reporting network 
performance data; 

'fetrieving said network performance data from 
temporary storage according to customer entitlements; 
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connection to the routing engine device; ancL 

retrieving information relating to tjpte transaction 
requests and forwarding back the information to the 
client application via the secure server, said client 
application presenting the information to the customer 
at the client workstation via^daid integrated 
interface . 
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V&*- The metlafod as claimed in Claim ^03, 
further comprising/ providing one or more database (s) 
for storing the ^data statistics generated by the 
routing engine/device and the plurality of network 
control elements, said one or more databases operating 
in conjunction with a proxy server for processing 
predetermined transaction requests locally by 
retrieving information related to the transaction 
requests from said one or more database (s), and 
fo/warding the information to the client application. 

;PV \ o/ 

^S^- The\ method as claimed in Claim further 
^ including the step of generating a web cookie at each 
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3 instance o£ client identification to link a session 

4 with said client through a. plurality of discrete client 

5 communicatidfis in said session to verify said client to 
b said dispatcl\ server at each transmission in said 
7 session. 




The method as claimed^irn Claim 1Q& , wherein 
said cookie is generated by^a^ program on a separate 
server during an entitlements communications, after 

adthe 



identification and 



ithentication of the client. 

&5 



further 





yyf . T>r6 method as claimed in Claim 
including/ encrypting client identification, 
authentication and said session management cookie 
during each transmission. _ ^ j^^t 



The method as claimed in Claim yrf , wherein 
[aid session cookies provide simultaneous session 
managemen\for a plurality of system resource 
platforms . 

( . The method aes claimed in Claim 

further including encrypting transmission of all 
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resources provided by said communications service 
enterprise via a secure web server; and, 

(c) each said secure web server supporting 
communication of request messages entered t>y said 
customer via said customer interface to s4id one or 
more network management resources capable of providing 
a desired communications network man^§ement function; 

wherein said one or more remote Application resource 
processes said request messages arid provides responses 
to said one or more secure web/servers for secure 
uploading to said client browser and display via said 
integrated customer interface, thereby enabling a 
customer to manage its communications network assets. 
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2. The integrated system as claimed in claim 1, 
wherein said one one more secure web servers supports a 
secure sockets j^ayer communications protocol including 
secure socket /connections for encrypted communication 
between said' client browser and said secure web server, 
said secure server also providing session management 
including customer identification, validation, 
entitlements and encryption to link said session with 
said/customer , 



COS-97-087 



-449- 



t 



11038. sf 

mb\F:\WORK\117l\ll038\spec\H038.spe 



in 

m 

3 

ru 

i 



1 
2 
3 
4 
5 
6 
7 
8 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 



initiation by said customer, the backplane object 
further enabling inter-application communications >&mong 
the client applications and also with said backgdane 
object, 

whereby said backplane object and the client 
applications interoperate with one another to provide 
said integrated customer interface to/a plurality of 
communications network management products and services 
subscribed by the customer. 



6. The integrated system as claimed in claim 5, 
wherein a network management resource comprises a 
server for providing/a customer authentication function 
and for downloading a logon object to be launched by 
said web-based GJfl, the logon object capable of 
accepting logoi/ transactions from the customer and 
creating a session object for communicating with said 
first server to provide said customer authentication, 

whereby upon successful customer validation, the 
logon oivject sends a command to the authentication 
serve/ to download said one or more client applications 
and /said web-based GUI having the backplane object. 
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7. The integrated system as claimed in claim/6, 
further comprising: a user object for representing a 
current customer, the user object further communicating 
with said authentication server to detex^fine the 
customer's entitlements to the web enabled 
communications network management Services, 

whereby the backplane uses the entitlements to 
display via said integrated interface only those web 
enabled services and products to which the user has 
privilege . 
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8. The injsfegrated system as claimed in claim 7, 
wherein a client application is invoked directly by the 
backplane object when the user selects the service 
associated/with the client application, the selected 
client application running in a frame independent from 
a web/Drowser' s window. 



COS-97-087 



-452- 



11038. sf 

mb\F : \WORK\1171\11038\spec\11038 . spe 



^7 



12 . The integrated system as claimed in claim 
f wherein a network management resource comprises a 




server for providing a customer data report manac 
function comprising and a database for maintaining an 
inventory of reports associated with a customer, a said 
client application including: 

a report requestor application enabling creation 
and scheduling of customer specific reports pertaining 
to usage of their switched communications networks and 
initiating generation of report Request messages for 
said one or more network management resources via said 
integrated interface; and, 

a report viewer application enabling display of 
reports in accordance wi£h customer-entitled reporting 
options . 



13. The integrated system as claimed in claim 12, 
wherein said report manager server accesses report 
items from said database according to a received report 
request message, and generates a response message 
including a metadata description of reporting items to 
be inc/uded in said report, 
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whereby customer- specif ic data from a network 
management resource and said metadata description of 
customer-selected reporting items are utilized to 
generate a completed report for presentation to said 
customer via said integrated interface. 

14. The integrated system as claimed in claim 13, 
wherein said report requester application enables 
customization of reporting items to be included in said 
customer report, said aerver for providing a customer 
authentication functipn providing said reporting items 
capable of being customized according to said customer 
entitlements to san_d report requestor application when 
generating a report request message. 

15. 2;he integrated system as claimed in claim 13, 
wherein ar network management resource further comprises 
a report scheduler system for initiating periodic 
generation of reports from other network management 
resources at a customer-specified frequency. 
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routing plans and associated call routing Eflan details, 
and interfacing with a plurality of network control 
elements for configuring a customer's/communications 
network according to a desired caLi routing plan; and, 

a network management server/ for receiving customer 
request messages for accessing^ said call routing plan 
details from said communicataons network configuration 
device, retrieving said call routing plan details 
according to customer entitlements, and downloading 
said call routing plan/details for customers via said 
integrated interface . 



29. The irttegrated system as claimed in Claim 28, 
wherein said report requestor application enables 
generation of messages specifying customer modification 
of said cali- routing plan, said network management 
server receiving said messages via said integrated 
interface and translating said received modification 
reques/ into commands for input to said network 
configuration device, 

whereby said commands are forwarded to said 
network control elements for configuring said 
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routed to a network number used in a particular call 
routing plan for a predetermined period of time /y ^aid 
network management server enabling said 
allocation of call traffic routed to a numb@x to 
automatically revert to a corresponding percent 
allocation specified prior to invocation of said order 
at a customer-specified revert time, 
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33. The integrated system as claimed in Claim 28, 
wherein a network management, resource comprises: 

a customer's switches data circuit network; and, 
a device for periodically polling network switches 
of said switched dat# circuit network to obtain network 
performance data relating thereto and temporarily 
storing said network performance data; said integrated 
system further/ comprising : a broadband network server 
for receiving customer request messages for reporting 
network performance data, retrieving said network 
performance data according to customer entitlements, 
and downloading said network performance data to said 
customer for presentation via said integrated 
intzerf ace . 
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44. The integrated system as claimed in C^aim 
28, wherein a network management resource includes a 
system for generating invoice documents relating to a 
communications management services provider by said 
communications service enterprise; saidyantegrated 
system further comprising: 

a client application download^ from the secure 
web server for enabling selection and presentation of 
invoice documents in accordance with customer 
entitlements, said client application further 
generating an invoice request message in response to 
customer selection of ya specific invoice option and 
forwarding the invoke request message via the secure 
web server; and 

an lry^oi^e/ application server for maintaining a 
database <bf Mage files associated with invoice 
documents ^rom the application service and receiving 
the invoice request message, said invoice application 
server accessing the database in response to a request 
messaq£, generating a response message including a 
custodier selected invoice document, and downloading 
saiyd response message to said client workstation, 
wijfereby said customer selected invoice document is 
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47. The integrated system as claimed in Claim y 
28, wherein a network management resource further 
comprises a system for providing a circuit switche 
call center management function, said integrate^/ syster 
further comprising: 

a client application downloaded from thfe secure 
web server for enabling a customer to monixor, define, 
and manipulate call routing parameters, Ahe client 
application further formatting customer defined 
parameters into client message transactions and 
communicating the client message transactions to the 
secure server over the secure connection; and, 

a routing engine device /or maintaining call 
routing rules and interfacing with said plurality of 
network control elements £or directing call routing and 
receiving data statistic^, the routing engine device 
further using the rule/, the data statistics, and the 
customer defined parameters in determining where to 
route calls, whereby customer control of call routing 
via said integrated interface is enabled, 



48. 



["he integrated system as claimed in Claim 
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4 7 , further comprising a proxy server for processing/a 
plurality of transaction requests received from thje 
client application via the secure server by opening a 
connection to the routing engine device and r^urievmg 
information relating to the transaction req*fests and 
forwarding back the information to the client 
application via the secure server, and/wherein the 
client application presents the information to the 
customer at the client workstation?!. 

49. The integrated/system as claimed in Claim 

48, further comprising orfe or more database (s) for 
storing the data statistics generated by the routing 
engine device and the plurality of network control 
elements, said one or more databases residing with the 
proxy server, the proxy server further processing 
predetermined^ transaction requests locally by 
retrieving/information related to the transaction 
requests/from said one or more database (s), and 
forwarding the information to the client application. 
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14 supporting customer identification, authentication and 

15 a determination of network entitlements for tKe 

16 customer; / 

17 (b) managing a plurality of customer sessions 

18 over the public Internet with a secure web server, 

19 said secure web server providing session encryption and 

20 management of the customer's session, said session 

21 management including the steps' of identifying, 

^ 22 validating, and determining/the customer's entitlements 

M 8 23 within the network; / 

Lf§ / 

Ji 24 (c) initiating/download of a web-based GUI 

H? 2 5 from said secure web /Server, said downloaded web-based 

/ 

HI 26 GUI capable of launching one or more of a plurality of 

L, 27 client applications available to a customer according 

£ ! 28 to pre -determined customer entitlements, 

jj 2 9 (d) providing a customer interface integrated 

'~ 3 0 within said ^eb-based GUI upon launch of a selected 
00 / 

31 client application, said customer interface enabling 

32 interactive communication of request messages with one 

33 or more /of a plurality of communications network 

34 management resources capable of providing a selected 

35 communications network management function; 

36 /(e) a communications network management 
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communicating with a secure web server and/^ach of said 
plurality of said network management resources, said 
dispatch server verifying system access and proxy 
generation for said system resources after said 
customer's entitlements have been verified. 



61. The method as claimed in claim 60, further 
employing digital certificates to authenticate a secure 
web server to said/client web browser. 

62. The method as claimed in Claim 60 , wherein 
said downloaded web-based GUI comprises a backplane 
object downloaded with, and launched by said web based 
GUI, said/backplane object launching said client 
applications programs upon initiation by said customer, 
the backplane object further enabling inter-application 
communications among the client applications and also 
with/said backplane object, 

/ whereby said backplane object and the client 
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comprising : 

providing a customer object for representing a 
current customer, the customer object communicating 
with said authentication server to deterjjftane the 
customer's entitlements to the web enabled 
communications network management services, 

whereby the backplane uses/the entitlements to 
display via said integrated interface only those web 
enabled services to which tzrie customer has privilege. 

65. The method/as claimed in claim 64, further 
including the sten/ of : 

executing a/client application directly by the 
backplane object when the customer selects a client 
application associated with a desired communications 
network management service, the selected client 
application running in a frame independent from a web 
browser Vs window. 

/ 66. The method as claimed in claim 65, further 
including the step of : 

COS-97-087 



-481- 



• 




11038. sf 

mb\F : \WORK\1171\11038\spec\11038 . spe 



i* 

5 R 
U = 

01 

m 



3 
4 
5 
6 
7 
8 
9 
10 



1 

2 
3 
4 
5 



maintaining session information received from a 
network management resource in static memefry for the 
duration of a session, and enabling the' client 
applications to access the static mejnory, 

whereby a need for each of tt*e client 
applications to communicate witfef remote network 
management resources servers /or once obtained 
information is eliminated. 



67. The method acs claimed in claim 65, wherein 
said client applications utilizing a set of common 
graphical user interface objects and the backplane for 
providing common/look-and-f eel desktop window 
management features . 
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68. The method as claimed in claim 66, wherein a 
network management resource comprises a report manager 
server for providing a customer data report management 
function and a database for maintaining an inventory of 
reports associated with a customer, said method further 
comprising : 
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providing a report requestor client application 
enabling creation and scheduling of customer/specif ic 
reports pertaining to usage of their switched 
communications networks and initiating generation of 
report request messages for said one /or more network 
management resources via said integrated interface; 
and, 

providing a report viewer/application enabling 
display of reports in accordance with customer-entitled 
reporting options. 
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69. The method/as claimed in claim 68, further 
comprising : 

accessing report items from said database of 
inventory reports according to a received report 
request message; and, 

generat/ing a response message including a metadata 
descriptic^n of reporting items to be included in said 
report , 

wbfereby customer- specif ic data from a network 
management resource and said metadata description of 
customer- selected reporting items are utilized to 
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and, 

downloading said network performanp€ data to said 
customer for presentation via said integrated 
interface . 

flro . The method as tzlaimed in Claim pfe , further 

comprising: 

enabling display <zff broadband network reports in 
accordance with selected customer reporting options, 
said customer reporting options including specification 
of graphical, tabular, and map views of said network 
performance datf 

<*3 / 

Stl . / The method as claimed in Claim jfs, wherein 
said report viewer application includes supporting 
simultaneous multiple graph reporting views of specific 
broadband network performance data. 



saAd customer's switched data network generates alarm 



y 2 



The method as claimed in Claim ^4, wherein 
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status indications, said broadband network srerver 
receiving said alarm status indications jJertaining to 
said customer's network and communicating alarm status 
data to said customer workstation via said integrated 
interface . 



.aimed in Claim 9'. 



The method as olaimed in Claim 9?7 further 
comprising the step of generating customer request 
messages specifying network performance thresholds for 
enabling reporting of /specific data network behavior 
via said integrated interface. 
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op / 

The/ method as claimed in Claim 96, wherein 
said report vLewer supports display of a graphical view 
comprising ar/ area map view having indicators depicting 
locations of a customer's data network, said method 
including /enabling said customer to select said 
indicators on said graphical representation and 
providing a textual view of network performance 
characteristics relating to physical circuits supported 
at said selected network location. 
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The method as claimed in Claim ^4 , whexem 
a network management resource includes a system £or 
providing an alarm management function including a 
device for deriving performance alarms bas^d on 
performance statistics collected on the vferf ormance of 
a customer's data network; said method/further 
comprising : 

providing an event monitor server for receiving 
and storing the network performance statistics and the 
derived alarms from the deriving device, and 
communicating said network/performance statistics and 
the derived alarms for presentation to said customer 
via said integrated ir^erface, 



0? / ^ 

9$. Th^method as claimed in claim^S, further 

enabling customers to define and submit network 
performance/thresholds specifying reporting of specific 
network behavior via said integrated interface, said 
event monitor server filtering said network alarms and 
performance statistics according to the customer- 
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defined threshold for presentation to the customej^at 
the client workstation. 



The method as claimed ipr ^laim j4 , further 
enabling customers to define and Ater troubleshooting 
procedures for specific alarms/or circuits pertaining 
to the data network via the/integrated interface. 



of) 



^J^f- The method as claimed in claim J/f, 
providing a client/ application for enabling customers 
to acknowledge ireceipt of a network alarm, via said 
integrated interface, said event monitor server 
automatically launching a trouble shooting procedure 
upon acknowledgment of the alarm associated with the 
troubled shooting procedure. 

The method as claimesJ^a^Tciaim yfa, wherein 
a network management jce sdj^jJe includes a system for 
generating invoice defl^yments relating to 
communicationsx^fietwork management services provided by 
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said communications service enterprise, said ^pftethod 
further comprising: 

downloading a client application f^&m the secure 
web server for enabling selection an$2r presentation of 
invoice documents in accordance wyth customer 
entitlements; 

generating customer regdest messages including 
customer selection of a specific invoice option; 

providing an invoice application server for 
maintaining a databas^je of image files associated with 
invoice document^ f^pm t^he application service, said 
invoice application/server: receiving the invoice 
request message Vffom said customer; 

accessing the database in response to a request 
message; 

;ing a response message including a customer 
selected /invoice document; 

unloading said response message to said client 
workst^at ion ; and , 

formatting said customer selected invoice document 
in /a manner suitable for display via said integrated 
-ient interface . 
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The method as claimed in Claim ^4 ', 
wherein the database of image files further Includes an 
object database, said invoice application ^erver 
further : 

converting invoice documents to jafiages; 
defining key information necessary to retrieve 
documents from the communications/network management 
resource application service arya compressing the 
documents for storing; and 

loading the compressec^/ documents into the object 
database . 

The rnetnod as claimed in Claim , 
wherein the database of image files further includes an 
index database, ysaid method further including storing 
index pointers/ for pointing to the compressed documents 
in the index/ database . 



1 ^2 J The method as claimed in Claim ^X, wherein 
a network management resource further comprises a 
systenr for providing a circuit switched call center 
management function, said method further comprising: 
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downloading a client application from the secure 
web server for enabling a customer to monitor, /uefine, 
and manipulate call routing parameters, the jclient 
application further formatting customer defined 
parameters into client message transactions and 
communicating the client message transactions to the 
secure server over the secure connection; and, 

providing a routing engine device for maintaining 
call routing rules and interfacing with said plurality 
of network control elements for directing call routing 
and receiving data statistics, the routing engine 
device further using the/rules, the data statistics, 
and the customer defined parameters in determining 
where to route calls/ whereby customer control of call 
routing via said integrated interface is enabled. 



V>s / I'M 

3/03 . / The method as claimed in Claim L#2, 
further ycomprising: processing a plurality of 
transaction requests received from the client 
appl/cation via . the secure server by opening a 
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customer data between said secure web server a-ndisaid 
dispatch server using RSA encryption, ansKencrypting 
transmission of all customer data between said secure 
web server and said client web browser using SSL 



encryption . 



10* 



met 



as claimed in Claim ip4 , 



The 

further includinef encrypting each client request from 
said web browser with a public key provided by said 
communications network, and each of said client 
requests' includes an encrypted client cookie for client 
authentication. 
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